This document describes the load balancing models supported by Segura®, configuration procedures, and recommended best practices. Load balancing is essential to efficiently distribute connections among cluster nodes, ensuring high availability and performance of privileged sessions.
Load balancing models
Segura® offers flexibility in load balancing between nodes, supporting:
- Native load balancing: The cluster automatically distributes incoming connections among available nodes based on internal health and capacity policies.
- External load balancers: Integration with market-leading solutions such as F5, HAProxy, NGINX, as well as cloud-native load balancers (AWS ELB, Azure Load Balancer, Google Cloud Load Balancer). This supports high-demand scenarios, multi-region environments, and specific architecture requirements.
Configuration procedures
Native load balancing
- When adding a new node, Segura® automatically includes it in the load balancing pool.
- Native health checks verify node availability and capacity before directing connections.
- In case of node failure or degradation, new sessions are redirected to healthy nodes.
Integration with external load balancers
- Configure each node to accept connections on the designated port (according to supported ports and protocols).
- On the load balancer, create a pool/listener pointing to all cluster nodes.
- Define the load balancing algorithm (Round Robin, Least Connections, IP Hash, etc.).
- Configure health checks to monitor node availability (HTTP, TCP, or custom).
- Optionally, configure session affinity/persistence as required by the application flow.
Example topologies
- On-premises: F5 or HAProxy distribute sessions to nodes in different racks or data centers.
- Cloud: AWS ELB directs sessions to nodes across multiple availability zones.
- Multi-region: Local load balancers in each region integrated with a global load balancer for failover and geographic distribution.
Best practices
- Keep health checks configured for rapid failure detection.
- Update the load balancer pool when nodes are added or removed.
- Use load balancers with built-in redundancy and failover for critical environments.
- Document firewall rules to ensure exclusive communication between the load balancer and nodes in production.